4b452e6ae07b9bbfaf6c63c3eab8e54f060ed9ec19f25b210aa4ded8b3ac2a1c

Analysis

max time kernel
149s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 17:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bflumod7.html
Size 61KB
Sample261026-vkxhsat19n
SHA256 4b452e6ae07b9bbfaf6c63c3eab8e54f060ed9ec19f25b210aa4ded8b3ac2a1c
MD5 e3e0b0342413101784e6cce83ca2fb22
SHA1 b51101f8d08df8af6fa622829070bd664fc624b9
SHA512 90bbc8814759dc08507e55ccc23eff88d65c507a2f5ce7e1c598f21a17af70643bb8777ad8f71bc6c6265164be197ff27924080a9cafdb865b662f24f7382a06
SSDEEP 768:2JG5RcDkTJjCb4/9A6XDBe5XBb5A8auyg0XTzCJvEs6av:D5RwkTJUSe5xbXrvEs6av
TLSH
T14353E6B260F01877019386E9A669AB0EBF93D107D60B5949B2FC07941FC3F979C477A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4024	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{FA11F9FD-74F9-4FDC-B6B7-27070FD57E1D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3700	msedge.exe
3700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4120 wrote to memory of 2428	4120	msedge.exe	88
PID 4120 wrote to memory of 4024	4120	msedge.exe	89
PID 4120 wrote to memory of 5160	4120	msedge.exe	90
PID 4120 wrote to memory of 5160	4120	msedge.exe	90
PID 4120 wrote to memory of 4020	4120	msedge.exe	91
PID 4120 wrote to memory of 5160	4120	msedge.exe	90
PID 4120 wrote to memory of 4020	4120	msedge.exe	91
PID 4120 wrote to memory of 4148	4120	msedge.exe	93
PID 4120 wrote to memory of 4220	4120	msedge.exe	94
PID 4120 wrote to memory of 4148	4120	msedge.exe	93
PID 4120 wrote to memory of 4148	4120	msedge.exe	93
PID 4120 wrote to memory of 4220	4120	msedge.exe	94
PID 4120 wrote to memory of 4220	4120	msedge.exe	94
PID 4120 wrote to memory of 4316	4120	msedge.exe	95
PID 4120 wrote to memory of 4316	4120	msedge.exe	95
PID 4120 wrote to memory of 4316	4120	msedge.exe	95
PID 4120 wrote to memory of 1216	4120	msedge.exe	96
PID 4120 wrote to memory of 1216	4120	msedge.exe	96
PID 4120 wrote to memory of 1216	4120	msedge.exe	96
PID 4120 wrote to memory of 5312	4120	msedge.exe	98
PID 4120 wrote to memory of 5312	4120	msedge.exe	98
PID 4120 wrote to memory of 5312	4120	msedge.exe	98
PID 4120 wrote to memory of 3644	4120	msedge.exe	99
PID 4120 wrote to memory of 3644	4120	msedge.exe	99
PID 4120 wrote to memory of 3644	4120	msedge.exe	99
PID 4120 wrote to memory of 2916	4120	msedge.exe	100
PID 4120 wrote to memory of 2916	4120	msedge.exe	100
PID 4120 wrote to memory of 1516	4120	msedge.exe	101
PID 4120 wrote to memory of 1516	4120	msedge.exe	101
PID 4120 wrote to memory of 2716	4120	msedge.exe	103
PID 4120 wrote to memory of 5388	4120	msedge.exe	107
PID 4120 wrote to memory of 1148	4120	msedge.exe	108
PID 4120 wrote to memory of 2600	4120	msedge.exe	109
PID 4120 wrote to memory of 1300	4120	msedge.exe	110
PID 4120 wrote to memory of 1300	4120	msedge.exe	110
PID 4120 wrote to memory of 3700	4120	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\bflumod7.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffce7ddc188,0x7ffce7ddc194,0x7ffce7ddc1a0
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,5544485732379777510,14521315254381703773,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,6671093669573188896,11261750858953301836,262144 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:2
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2176,i,10739511489395255300,359915877011968992,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:13
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,2243209015058998360,1115070099630681405,2097152 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,5200326835818206652,14435134104322916979,2097152 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4352,i,6355113581405056290,18434642108264418654,2097152 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4448,i,11755511083991638777,7970645162846954158,2097152 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:9
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5436,i,9994804144868513809,14923781918700861241,2097152 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3840,i,3055897923639824626,51429430049778234,2097152 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,12105277888198119903,11048430659602044960,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:14
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,475966111346033462,660966762029895281,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:14
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,2198738721058027926,13597605505970563454,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,2198738721058027926,13597605505970563454,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,2268376297392968553,1255590356720031519,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:14
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,6026034679051424638,14783476618859189492,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,11787428616933296094,1719387907870542183,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:14
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,18392661580076874032,5904660966041181127,524288 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4560,i,9306742731209615313,9672134814039479370,262144 --field-trial-handle=2484,i,1379874350078753795,14472831101850481138,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3700

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

12ea078f-0eed-4433-9c65-c55a0a5347ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12ea078f-0eed-4433-9c65-c55a0a5347ab.tmp
Size 38KB
SHA256 db0e80651e6c326a8dfd113d70edff979bd0ff99ba1f8471e5ab13b52a35aadc
MD5 9415ec78900929dbd26d13f201c7a124
SHA1 f988e7e66a7ecc8757a702b882768a5f1823fe68
SHA512 286ebec861040def998e8415986ad736667bfb234e7b81f883135684f3b1d4f7a48c74b5c12b97ff8013ca14eec2fa36fa317bfde7505782eccb6b7295352f0e
SSDEEP 768:5/UxvxjgC+k3DTDybNbK1DztIOeRFZD1fTos7RCo/+Pu:sZj3+k3D/fY1fT/RTKu
TLSH
T17D03B03AB8E45C335CF6E244B24A764BFFF455B386C959D809DD2E0E058BB9D130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12feaa4e-baf3-40e0-84b6-363225fbcb70.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12feaa4e-baf3-40e0-84b6-363225fbcb70.tmp
Size 33KB
SHA256 84a07f299fe98810dec4953e18aea5e8a01259d935da2ce7e436dcd32008cadb
MD5 4c309765be4cbcdeea45cb3ac03e64ba
SHA1 7a67869ae945df43c1840a890daea5e8d7abc625
SHA512 6b8c5a08dac4dc2a2534f4ecab02fd8ee79376ca15235b5575d7685b0196d16468fbed9f7a009db3536ab0783330b3f0020485caaf11059bca45f262533f74b1
SSDEEP 768:Rz35eD5lgxybNbK1DztVOeRFZD1fTos7Rjo6XLc:Rz35w5l+sY1fT/RkoI
TLSH
T16AF2AF3AF8E45D338DF5E250B24A7543BEF49253CADC4A8895CD2E1D04CB6DD234791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

60d667e3-9050-411c-97f5-df42ae99feaa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\60d667e3-9050-411c-97f5-df42ae99feaa.tmp
Size 37KB
SHA256 30c4a391eadd3004fcbf9c412251268672c71dac8169c8fc4e2402ce60b3bb5f
MD5 12288c1eb01d02e58151fcc70bbf72a2
SHA1 73404ae884496345fc789945e34aa9a8fa52c7f5
SHA512 e51a2252e75f8a2ae8563b270be5cb1e486159956aba1a3c97001aeb3af14a3cb9e93ff6a5727349f8570b2f803013e3bf1267a9ab5d95e7dcd0fca00813bbf3
SSDEEP 768:z/UxvxjgC+k3rE+ybNbKDOeRFZD1fTos7RzOL/+Pu:GZj3+k3r1OY1fT/RUKu
TLSH
T1CC03BF3AF8D45C378CF6E244720A764BBFF455A396C91A9809DC2F0E158B7AC130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8673507a-2ec3-49d3-aab0-2dfbb446afd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8673507a-2ec3-49d3-aab0-2dfbb446afd2.tmp
Size 38KB
SHA256 ffeef55ca4cdc29b4428e182db19c02522cba072f3f5e11ee2ecf9bb51a4e7d6
MD5 34c0576b2030b0c12525bbabd73e7fc7
SHA1 ead3234088c0a4758f2dbe07ea6f86852fd7e09e
SHA512 ccb7985e632ebd9b1f0f092e3e1046ce6a9b0fbc244dea74e5db99fee3396ed9ce124065d9b0243445c0c7010ca7ac504ab43505663055d9760abda8adee5eea
SSDEEP 768:M/UxvxjgC+X35eD5lDxybNbK1DztVOeRFZD1fTos7Rjouvx:5Zj3+X35w5lNsY1fT/RkWx
TLSH
T1FE03BF3AB8A45C334CF6E244B24A7647FFF4956386C9599849DC6F0E05CBBED130B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8ef562c8-ac28-4135-883e-717cdc8073be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8ef562c8-ac28-4135-883e-717cdc8073be.tmp
Size 36KB
SHA256 7f719fb00012385ffe8b2c151bbe226d16622fe7adb30c530b3547cc544886e9
MD5 d9e705896fa7f4d739f4b6231bde7d87
SHA1 f4728a0389dcf30f1f23960a2d776037f226b80e
SHA512 25563d2072166d439c783b85596d13e7fb951fbb161c13c2f10ba963aa0a43eea5889c063e6c3c1be8b029dc5c1e9d48b9cd4317a6c003548c3d05e977b4b2b5
SSDEEP 768:FFdi3+wgFeD5lgxybNbK1Dzt2OeRFZD1fTos7Rjo6XLc:Bi3Yw5l+hY1fT/RkoI
TLSH
T19BF29E37A8D49D379DF6DB40F2093543AEF082A3C9D9999896C86E1D00CB6DD134BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

960a246e-d0cd-4085-a6ea-e8021e7d9748.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\960a246e-d0cd-4085-a6ea-e8021e7d9748.tmp
Size 33KB
SHA256 7c621095e451918f063f53ddf06d11bd6d3385eff6c506d06465d1739d8ee87c
MD5 03100fccb4d93994dcfa9f0e2eb30909
SHA1 8ca5589c4de9b184ada2728d9bcf5ad2b99c34b2
SHA512 489b0d171af734ae13da3650d27cd37457afefe26503b70a7d16ed9b00bed748a8c79a1b55eac8cefa940056b20b2221e52587ea1e7a2258781abcc9fe0bfaea
SSDEEP 768:Az3SeD5lgxybNbK1DztVOeRFZD1fTos7Rjo6XLc:Az3Sw5l+sY1fT/RkoI
TLSH
T1D5F2AF3AB8E45D338DF5E250F24A7543BEF49253CADC4A8885CC2E1D04CBADD234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef395088-f5f2-49a3-8261-7e5b85b4b13e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\ef395088-f5f2-49a3-8261-7e5b85b4b13e.tmp
Size 105KB
SHA256 aa204e7f585c1f2b64ec2dfe226fcda3dd40e2d6c7acaecb8bc39c51bf5021a2
MD5 82ef5ef3fd97f3d79a47f09529d45307
SHA1 4d70248d33884063e95777b4e6e0d998931440a1
SHA512 a3e3e08187ec16facc64907edae849970f4fffaceb0ff69b6b9421c352de4ae4396f6c7d28c814160c616bf604747c73d4cf8a04f10f2fc8fa4a07c14210288d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F8B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4945E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

4c2f4530-c08d-4736-8cd3-de9ee129fb4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4c2f4530-c08d-4736-8cd3-de9ee129fb4e.tmp
Size 11KB
SHA256 b5eee0a5a57f759dd3fa9cbe9756b88ff4aae2be83019affec9051b83a15ef72
MD5 82fdba10ca9547f74905a55e1e775d72
SHA1 d17633baf90d925db251f0dc06302164ef6c97f1
SHA512 24d99f5b8f15b88332811aa2de65406d3173db6fe1adb693d27c0c0508c94b1570389d8c322d5efb7d901d4339c1435e39923c42f3e4b0d1d934dba6234ccbdd
SSDEEP 192:sxRmR+bL/f7sblK7xuRzoA8p4I/g6+WNIYDoCrFGGIgDEJ:sxRm+L/f7sbl61p/5IE0
TLSH
T12232B715AD68A93B5CCBD219BB65BF53D2F95032A1D05E48EAFC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52277d94-7df4-47b6-9390-8f83e7f796d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52277d94-7df4-47b6-9390-8f83e7f796d7.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

78549fcc-6b41-4647-bd6a-6365edd47a3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\78549fcc-6b41-4647-bd6a-6365edd47a3e.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

83c36748-d95c-4935-b21b-a864f0ae1638.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\83c36748-d95c-4935-b21b-a864f0ae1638.tmp
Size 11KB
SHA256 3490a5232a0787e7cc41819da9cdd46c86748301f0f55833d13d55066a5a3c69
MD5 715ed0ba788f888b96ec5e292a8a5d91
SHA1 518190321b8f8ace339485c9e89e3a834ca8a8e8
SHA512 a0dc3b71a4814e20bfc8afb96e801c898f70a0eacdeabe11d41c94a8446c05dfd237f5c06475a57b81304f4461f4200386afd313b6ccf63eb46a437f35406f85
SSDEEP 192:sxRxR+bL/f7sflK7xuRzoA8p4I/g6+WNIYDoCfFGGIgIJ:sxRx+L/f7sfl61p/5IWs
TLSH
T11B32B8159E68A93B5CCBD21DBB65BF13D2F95032A1D15E48EAFC8A1C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 5e539b162a3f47ec6a1d3e438b7512f00ec5c3ed8d294779d216ab2bb258b416
MD5 2bb28e0dc786ae548073e5b5fd50945f
SHA1 93c1a3179cec4dbfcefbfd597951ace47bc8648f
SHA512 219440d78041334b8135448eb1362d7f4a4deeb2a1f52cfadffb4333717ed57da8be7e66d939791a81c322d6ce74587dcb6b6564de324407c38733d7ffc350ec
TLSH
T14951CA735597C093FFFBD13280C52B9737309D8AD5A78E828D68E4BC9D0EF10A284090
MD5 SHA1 SHA512 TLSH

Submit Download

e71dbb78-e876-49fe-ab4e-a24eb7700ad4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e71dbb78-e876-49fe-ab4e-a24eb7700ad4.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

71b8c52c-b600-4756-9b2c-5e12269fc764.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\71b8c52c-b600-4756-9b2c-5e12269fc764.tmp
Size 4KB
SHA256 101de267fb9ad314e6a8a4c8ed9fe0a6ca2f1e6370978c2c0a7d2226540c6e88
MD5 ae929356e698ddc7c802c95c611a28ed
SHA1 c6ca67c4eb8e131ff29cdccc8c3a6ca044d0e58c
SHA512 4d76a3beb710840834d7e5e5f5fc3f8a41cb31c3a47bf5aa1987eecc50e4bcd2216d911eb543d3177ccc945e2ab8da326b175fcf4d4626671109a3aa33279cb5
SSDEEP 96:DDOzJmHlVaaiZjhOzBSM4XEnZXrZxVVbc5CChGwQ:DazJmHlVaaiZjhO1StKZXrZjpc5CChGT
TLSH
T1C991ABF7C3E4477E991196F0AB156E2ACD19051A432C3C5689F4AF1B63F24B0E14169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9070af94-3ef2-4790-bf0f-2f3dbc93a6c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9070af94-3ef2-4790-bf0f-2f3dbc93a6c8.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

972cd490-3ae1-44a5-b66a-d2131e286321.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\972cd490-3ae1-44a5-b66a-d2131e286321.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 14846a9fd5d89fbc1a8da5a572239eeda3e352286206074e0295d0388de23cdf
MD5 2304d2a22513ccbb6917610e3f94e3fc
SHA1 3c9faed30679d14b5c4bb923631a3709245172e2
SHA512 cc8ef5d773834fca07ca404932c94571b5c0ef0ffff9ad81e4345376ddaf95d6674a7b0af4f93a4dd99e3f0e3e397023605d22ec06aaa316d3c3089edc3ba070
SSDEEP 48:K0nKzHJp5Sbx8hISXSK9X19SxXCY0lHbyLp2Np2sp2hp29p2Pp27p2/p2gbp2TpG:Kc0AKtyeehqKKo14QKVCL9
TLSH
T17D91DD15717B421038BE295942B8962B025231B33158E53FBFBC45B69EAFE045CFE6CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

a6d382c1-964a-4896-a9c6-4bcc4f0c6ab4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6d382c1-964a-4896-a9c6-4bcc4f0c6ab4.tmp
Size 23KB
SHA256 0792a741435e2e0920c18c197d07f3668d42350258d9882999e4ed76553e25e1
MD5 a72f9fc84120429b533f516053c19e53
SHA1 2b05b949e2370d112b6d5abbefecdd09e0e31869
SHA512 a64202a1fa427cfe37f6372766dd469480caca3f950677fb6606c478b0975d5a7ffabb7fa739d93afd9947b3df297077d81b301f341cb782970443c8ab931e8e
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9SroTy4:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0Vm
TLSH
T14BB2DA2B640CC77E4F804AADAC1A6F977E5802C796988D4047FE995C03C77EFA11E4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa06ca28-3e25-48ed-b6c0-f7122d7f1b94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa06ca28-3e25-48ed-b6c0-f7122d7f1b94.tmp
Size 11KB
SHA256 a6a0d937fa91c151ff4a104a2f33540bdd6a9ca4cd790c351041d21f9ae7bd8e
MD5 deb7d53d08f0456063fdc0ad0674e890
SHA1 c50109ae3900e66b02b1a060420422b29ba79639
SHA512 99153d1ed6763ce1658fcff13393d894b4c8333a98ce1c268d5eeab581fb239fd8654e3fbe10e88be7891b3ec6cd4f142d49372966adc13f2de2c891d6bf7a8b
SSDEEP 192:sxRmR+bL/f7srlK7xuRzoA8p4I/g6+WNIYD3qrFGGIgD2J:sxRm+L/f7srl61p/5InO
TLSH
T17E42C9159D68A93B9CCBD61DBB55BF13D2F99032A0D15E48FAFC8A1C04E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

cf70e7ef-80d8-45c7-8a92-006dc37393e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cf70e7ef-80d8-45c7-8a92-006dc37393e8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3a2e4df-2e10-4441-8232-f7f8a2fe5a22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d3a2e4df-2e10-4441-8232-f7f8a2fe5a22.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download